
AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (Currently amended) A mdthod for sharing a secure communication 
session with a client between a plurality of servers, comprising: 

receiving a message from tne client at a first server in the plurality of 
servers, the message including a s^sion identifier that identifies a secure 
communication session with the cBent; and 

if the session identifier dofes not correspond to an active secure 
communication session on the firpt server, establishing an active secure 
communication session with the/client on the first server by, 

attemptinig to retrieve state information associated with the 
session identifier for an active secure communication session 
between the cliJnt and a second server from the plurality of 
servers, 1 

if the smte information for the active secure communication 
session is retrieved, using the state information to establish the 
active secure communication session with the client without 
having to corAmunicate with the client, whereby the secure 
communication session is transferred from the client and the 
second server to the client and the first server without incurring the 
oi,r^vh r >nr| r/f prtnhlir ^ hing R iiow fiocure connection without having 
to go thrdugfa a time-consuming process of setting up a new 
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to go through a time- consuming process of setting up a new 



communication session including any related cryptography , and 



if the state in: 
session is not 
the active secure 



ormation for the active secure communication 
retrieved, communicating with the client to establish 
conimunication session with the client. 



2. (Original) The method o 
state information includes: 

attempting to use the sessioji 
plurality of servers that has an acti^ 
client that corresponds to the session 

attempting to retrieve the state 



claim 1, wherein attempting to retrieve the 



identifier to identify the second server in the 
e secure communication session with the 
identifier; and 

information from the second server. 



3. (Original) The method of claim 1, wherein attempting to retrieve the 
state information involves attempting to retrieve the state information from a 
centralized repository that is in copimunication with the plurality of servers. 



1 4. (Original) The method/of claim 3, wherein the centralized repository 

2 includes a database for storing the state information. 

1 5. (Original) The method of claim 1, wherein establishing the active 

2 secure communication sessior/ involves establishing a secure sockets layer (SSL) 

3 connection with the client. 

1 6. (Original) The method of claim 1, wherein the state information 

2 includes: 

3 a session encryptiofi key for the secure communication session; 

4 the session identifijer for the secure communication session; and 
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7. (Original) The met lod of claim 6, further comprising: 
using the message to update the running message digest; and 
checkpointing the upc ated running message digest to a location outside of 
the first server. 



8. (Original) The met lod of claim 1, further comprising, if the state 
information for the active secure communication session is retrieved, purging the 

tion from which the state information was retrieved, 
cannot be subsequently retrieved by another server in 



state information from a loc; 
so that the state information 
the plurality of servers. 



1 9. (Original) The mjbthod of claim 1, further comprising initially 

2 establishing an active secure communication session between the client and the 

3 second server, the active secure communication session being identified by the 

4 session identifier. 



1 10. (Original) Th( 

2 state information include 

1 11. (Canceled). 

1 12. (Canceled). 



method of claim 1, wherein attempting to retrieve the 
authenticating and authorizing the first server. 



1 13. (Currently ahiended) A computer-readable storage medium storing 

2 instructions that when executed by a computer cause the computer to perform a 
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method for sharing a secure co ifimunication session with a client between a 
plurality of servers, the methoc comprising: 

receiving a message fro n the client at a first server in the pluraHty of 
servers, the message including i session identifier that identifies a secure 
communication session with th? cUent; and 



if the session identifier 
communication session on the 



communication 
second server to 



communication 



lioes not correspond to an active secure 
irst server, establishing an active secure 
communication session with thi client on the first server by, 

attemptir g to retrieve state information associated with the 
session identifiei for an active secure communication session 
between the client and a second server from the plurality of 
servers, 

if the state information for the active secure communication 
session is retrieved, using the state information to establish the 
active secure communication session with the client without 
having to communicate with the client, whereby the secure 
session is transferred from the client and the 
the client and the first server without incuiring the 



ov e rhead of e stablishing a n e w secure conn e ctio n wdthout having 
to go through a time-consuming process of setting up a new 



session including any related cryptography , and 



if the stat(5 information for the active secure communication 
session is not retrieved, communicating with the client to establish 
the active secure communication session with the client. 



1 14. (Original) The 

2 wherein attempting to retrieve 



comlbuter-readable storage medium of claim 13, 
the state information includes: 
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3 attempting to use the session identifier to identify the second server in the 

4 plurality of servers that has an active secure communication session v^ith the 

5 client that corresponds to the sbssion identifier; and 

6 attempting to retrieve the state information from the second server. 

1 15. (Original) The comj uter-readable storage medium of claim 13, 

2 w^herein attempting to retrieve the state information involves attempting to 

3 retrieve the state information from a centralized repository that is in 

4 communication with the plur^ity of servers. 

1 16. (Original) The computer-readable storage medium of claim 15, 

2 wherein the centralized repository includes a database for storing the state 

3 information. 

1 17. (Original) The cimputer-readable storage medium of claim 13, 

2 wherein establishing the aciive secure conmiunication session involves 

3 establishing a secure sockets layer (SSL) connection with the client. 



1 18. (Original) The pomputer-readable storage medium of claim 13, 

2 wherein the state information includes; 

3 a session encryption key for the secure communication session; 

4 the session identifier for the secure communication session; and 

5 a running message digest for the secure communication session. 

1 19. (Original) Tne computer-readable storage medium of claim 18, 

2 wherein the method further comprises: 

3 using the mes/age to update the running message digest; and 
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checkpointing the updated running message digest to a location outside of 
the first server. 
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secure communication sessior 
location from which the state 



20. (Original) The con puter-readable storage medium of claim 13, 
wherein the method further copiprises, if the state information for the active 

is retrieved, purging the state information from a 
nformation was retrieved, so that the state 
information cannot be subseqjiently retrieved by another server in the plurality of 
servers. 



mr 



21. (Original) The coifnputer-readable storage medium of claim 13, 
wherein the method further comprises initially establishing an active secure 
communication session between the client and the second server, the active secure 
communication session being identified by the session identifier. 

22. (Original) The computer-readable storage medium of claim 13, 
wherein attempting to retrieve the state information includes authenticating and 
authorizing the first server 

23. (Canceled). 



1 24. (Canceled). 

1 25. (Currently an^ended) An apparatus that shares a secure communication 

2 session with a client bettveen a plurality of servers, comprising: 

3 a receiving mecnanism, at a first server in the plurality of servers, that 

4 receives a message from the client, the message including a session identifier that 

5 identifies a secure conAmunication session with the client; 
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an examination mechanism that examines the session identifier; and 
a session initialization mechanism, on the first server, wherein if the 
session identifier does not correspond to an active secure communication session 
on the first server, the session initie lization mechanism is configured to establish 
an active secure communication session with the client by, 

attempting to retrieve state information associated with the 
an active secure communication session 
between the client ^d a second server from the plurality of 
servers, 

if the state/ information for the active secure communication 
session is retrieved, using the state information to establish the 
active secure communication session with the client without 
having to communicate with the client, whereby the secure 
communication /session is transferred from the client and the 
second server t^ the client and the first server without incurring th e 
overhead of ef i t/abUshing a n e w s e cui'e conn e ction without having 
to go through i time-consuming process of setting up a new 
communication session including any related cryptography , and 

if the state information for the active secure communication 
session is noti retrieved, communicating with the client to establish 
the active secure communication session with the client. 



1 26. (Original) The Apparatus of claim 25, wherein the session initialization 

2 mechanism is configured to attempt to retrieve the state information by: 

3 attempting to use me session identifier to identify the second server in the 

4 plurality of servers that Has an active secure communication session with the 

5 client that corresponds to the session identifier; and 

6 attempting to retrieve the state information from the second server. 
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27. (Original) The apparatius of claim 25, wherein the session initialization 
mechanism is configured to attempt to retrieve the state information by attempting 



to retrieve the state information froip 
communication with the plurality o 



1 28. (Original) The apparatus 

2 repository includes a database for 



a centralized repository that is in 
servers. 



of claim 27, wherein the centralized 
storing the state information. 



29. (Original) The apparatus of claim 25, wherein the active secure 
communication session includes a se :ure sockets layer (SSL) connection with the 



client. 

30. (Original) The apparatus 
includes: 

a session encryption key for 
the session identifier for the 
a running message digest for 



3 1 . (Original) The apparatus 
mechanism that is configured to 

use the message to update t 
checkpoint the updated rurujing 
first server. 



)f claim 25, wherein the state information 

Ihe secure communication session; 
secure communication session; and 
the secure communication session. 



of claim 30, further comprising an updating 



e running message digest; and to 

message digest to a location outside of the 



32. (Original) The apparatus of claim 25, further comprising a purging 
mechanism that is configured to pjurge the state information from a location from 
which the state information was rfetrieved, so that the state information carmot be 
subsequently retrieved by anothe|- server in the plurality of servers. 

10 
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33. (OrigW) The apparatus of claim 25, wherein the session initialization 
mechanism is configured to authenticate and authorize the first server prior to 
receiving the state /information. 



34. (Canfceled). 



35.f/Canceled). 
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